Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
File:                     323830343a386336343a3a2f33322d3332203d3e203631363135.roa (raw, json)
Hash identifier:          ETARc1ym3uXHnLaTzBVnoIlNEj6VvvKAvsUzJsi+O+I=
Subject key identifier:   A9:99:81:FB:CF:1C:96:61:52:EF:2E:C4:5E:D1:EA:CC:42:7F:37:D3
Certificate issuer:       /CN=2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149
Certificate serial:       43CF7D3E8AF94A8C90CCAE97986DF4A741CD48A7
Authority key identifier: 2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
Signing time:             Fri 28 Jul 2023 12:10:51 +0000
ROA not before:           Fri 28 Jul 2023 12:05:51 +0000
ROA not after:            Fri 26 Jul 2024 12:10:51 +0000
asID:                     61615
IP address blocks:        2804:8c64::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cf:7d:3e:8a:f9:4a:8c:90:cc:ae:97:98:6d:f4:a7:41:cd:48:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149
        Validity
            Not Before: Jul 28 12:05:51 2023 GMT
            Not After : Jul 26 12:10:51 2024 GMT
        Subject: CN=3082010A0282010100B15B5E643A82AC3B82842138AEC431D8EEB90A075820EFAEEE1F66088803724A101C15BEED3B42842CB38D6D8B490ACC5E69014ED501A423D00463FA50967E0460305D8CD048F81DACCE28085BE74FA5AA5A05DC04C2E34F9DCF9464CF1A8A9D31CED83CA3D760C51EF9618C63884EF57F3FE4827F00D4A0BF1C7272435E67E7F4FE89F634440E71C17C499A1CFC2B764435067A7523564BF073FF9F03A243618490D8EA205417D187BAA0184DE8A565B805C436B111DAB7EA28FE0023CD5A476459E0406C4B043613BB4A815BC812161C6F09B4856B468B665814C6C928824C7EBE1A4755A01E2ED8BFECA35ABD394828E95C7AE80B564D0340F2A2C467BE370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:5e:64:3a:82:ac:3b:82:84:21:38:ae:c4:
                    31:d8:ee:b9:0a:07:58:20:ef:ae:ee:1f:66:08:88:
                    03:72:4a:10:1c:15:be:ed:3b:42:84:2c:b3:8d:6d:
                    8b:49:0a:cc:5e:69:01:4e:d5:01:a4:23:d0:04:63:
                    fa:50:96:7e:04:60:30:5d:8c:d0:48:f8:1d:ac:ce:
                    28:08:5b:e7:4f:a5:aa:5a:05:dc:04:c2:e3:4f:9d:
                    cf:94:64:cf:1a:8a:9d:31:ce:d8:3c:a3:d7:60:c5:
                    1e:f9:61:8c:63:88:4e:f5:7f:3f:e4:82:7f:00:d4:
                    a0:bf:1c:72:72:43:5e:67:e7:f4:fe:89:f6:34:44:
                    0e:71:c1:7c:49:9a:1c:fc:2b:76:44:35:06:7a:75:
                    23:56:4b:f0:73:ff:9f:03:a2:43:61:84:90:d8:ea:
                    20:54:17:d1:87:ba:a0:18:4d:e8:a5:65:b8:05:c4:
                    36:b1:11:da:b7:ea:28:fe:00:23:cd:5a:47:64:59:
                    e0:40:6c:4b:04:36:13:bb:4a:81:5b:c8:12:16:1c:
                    6f:09:b4:85:6b:46:8b:66:58:14:c6:c9:28:82:4c:
                    7e:be:1a:47:55:a0:1e:2e:d8:bf:ec:a3:5a:bd:39:
                    48:28:e9:5c:7a:e8:0b:56:4d:03:40:f2:a2:c4:67:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:81:FB:CF:1C:96:61:52:EF:2E:C4:5E:D1:EA:CC:42:7F:37:D3
            X509v3 Authority Key Identifier:
                keyid:2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3332203d3e203631363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:88:1c:45:74:0a:ac:41:86:94:01:c4:9d:9d:e9:88:9f:a5:
         b7:46:44:2a:60:1f:36:cc:d3:fa:be:42:8e:31:5a:c4:a8:d1:
         39:26:8d:3a:34:94:44:48:3c:47:df:36:a8:2c:98:c9:69:d7:
         85:0f:15:fb:bb:7f:d1:91:b0:00:f8:c0:e9:e6:22:65:49:dc:
         aa:96:30:90:9d:f4:72:7a:57:ed:42:38:60:0c:8d:1e:02:e3:
         cc:05:39:43:fd:d2:26:7e:cb:d9:e4:0d:c5:80:f2:8a:8c:05:
         c1:1d:fb:b2:c1:0a:04:8b:75:ba:0a:ab:37:66:42:dc:21:52:
         47:9a:37:4f:4f:db:3a:1c:8b:f8:31:70:69:d5:8f:8c:69:0a:
         d2:5c:90:27:fa:98:f4:a8:ce:b0:fd:1d:2d:2d:cd:79:d8:4c:
         f4:52:cf:f5:3b:2b:7c:9a:36:40:27:10:a9:07:56:9b:d7:9c:
         f7:6e:76:56:71:87:f4:cb:ad:1d:e1:82:b9:cb:fa:19:d7:ba:
         55:ce:71:ce:58:84:0e:e0:eb:a8:7f:67:19:b0:e2:89:60:18:
         b6:11:06:ba:60:9e:7a:d9:ff:6c:38:c3:1c:52:9b:04:96:06:
         c3:0f:4c:a2:d1:71:41:ed:20:85:0a:ab:75:64:ea:5a:c7:a7:
         fa:a0:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----